-
Type:
Bug
-
Status:
Open
-
Priority:
Medium
-
Resolution:
Unresolved
-
Affects Version/s:
None
-
Fix Version/s:
None
-
Component/s:
None
-
-
-
-
Module:
BenAdmin
- Security
-
[Security Test]
{Cross Site Scripting}
Server side validations are missing on First name last name filed on Add child and Add Spouse pages.
Error get displayed while adding script after bypassing the client side validation.
Test Environment: Production - VM 208...
Tool Used : Tamper Data
Malicious user can enter any scripts through application to generate Server Errors.
There are no comments yet on this issue.
{"report":{"apdex":0.5,"isInitial":true,"journeyId":"dc404a57-cff1-422b-bafe-5689af20b580","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":1064.5999999998603,"redirectCount":0,"resourceLoadedEnd":1241.0999999998603,"resourceLoadedStart":192.5,"resourceTiming":[{"duration":361.80000000004657,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":192.5,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":192.5,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":554.3000000000466,"responseStart":0,"secureConnectionStart":0},{"duration":361.5,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":192.80000000004657,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":192.80000000004657,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":554.3000000000466,"responseStart":0,"secureConnectionStart":0},{"duration":361.30000000004657,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":193,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":193,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":554.3000000000466,"responseStart":0,"secureConnectionStart":0},{"duration":361.20000000018626,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":193.0999999998603,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":193.0999999998603,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":554.3000000000466,"responseStart":0,"secureConnectionStart":0},{"duration":361.9000000001397,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":193.0999999998603,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":193.0999999998603,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":555,"responseStart":0,"secureConnectionStart":0},{"duration":374.30000000004657,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":193.19999999995343,"connectEnd":193.19999999995343,"connectStart":193.19999999995343,"domainLookupEnd":193.19999999995343,"domainLookupStart":193.19999999995343,"fetchStart":193.19999999995343,"redirectEnd":0,"redirectStart":0,"requestStart":193.19999999995343,"responseEnd":567.5,"responseStart":567.5,"secureConnectionStart":193.19999999995343},{"duration":393,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":193.30000000004657,"connectEnd":193.30000000004657,"connectStart":193.30000000004657,"domainLookupEnd":193.30000000004657,"domainLookupStart":193.30000000004657,"fetchStart":193.30000000004657,"redirectEnd":0,"redirectStart":0,"requestStart":193.30000000004657,"responseEnd":586.3000000000466,"responseStart":586.3000000000466,"secureConnectionStart":193.30000000004657},{"duration":397.19999999995343,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":193.39999999990687,"connectEnd":193.39999999990687,"connectStart":193.39999999990687,"domainLookupEnd":193.39999999990687,"domainLookupStart":193.39999999990687,"fetchStart":193.39999999990687,"redirectEnd":0,"redirectStart":0,"requestStart":193.39999999990687,"responseEnd":590.5999999998603,"responseStart":590.5999999998603,"secureConnectionStart":193.39999999990687},{"duration":397.5999999998603,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":193.5,"connectEnd":193.5,"connectStart":193.5,"domainLookupEnd":193.5,"domainLookupStart":193.5,"fetchStart":193.5,"redirectEnd":0,"redirectStart":0,"requestStart":193.5,"responseEnd":591.0999999998603,"responseStart":591.0999999998603,"secureConnectionStart":193.5},{"duration":397.9000000001397,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":193.5999999998603,"connectEnd":193.5999999998603,"connectStart":193.5999999998603,"domainLookupEnd":193.5999999998603,"domainLookupStart":193.5999999998603,"fetchStart":193.5999999998603,"redirectEnd":0,"redirectStart":0,"requestStart":193.5999999998603,"responseEnd":591.5,"responseStart":591.5,"secureConnectionStart":193.5999999998603},{"duration":398.30000000004657,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":193.5999999998603,"connectEnd":193.5999999998603,"connectStart":193.5999999998603,"domainLookupEnd":193.5999999998603,"domainLookupStart":193.5999999998603,"fetchStart":193.5999999998603,"redirectEnd":0,"redirectStart":0,"requestStart":193.5999999998603,"responseEnd":591.8999999999069,"responseStart":591.8999999999069,"secureConnectionStart":193.5999999998603},{"duration":398.5,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":193.80000000004657,"connectEnd":193.80000000004657,"connectStart":193.80000000004657,"domainLookupEnd":193.80000000004657,"domainLookupStart":193.80000000004657,"fetchStart":193.80000000004657,"redirectEnd":0,"redirectStart":0,"requestStart":193.80000000004657,"responseEnd":592.3000000000466,"responseStart":592.3000000000466,"secureConnectionStart":193.80000000004657},{"duration":406.80000000004657,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":193.89999999990687,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":193.89999999990687,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":600.6999999999534,"responseStart":0,"secureConnectionStart":0},{"duration":406.69999999995343,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":194,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":194,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":600.6999999999534,"responseStart":0,"secureConnectionStart":0},{"duration":398.69999999995343,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/e80c7a6aee0fa86c2b1a716575a614aa/shortcuts.js?context=issuenavigation&context=issueaction","startTime":194,"connectEnd":194,"connectStart":194,"domainLookupEnd":194,"domainLookupStart":194,"fetchStart":194,"redirectEnd":0,"redirectStart":0,"requestStart":194,"responseEnd":592.6999999999534,"responseStart":592.6999999999534,"secureConnectionStart":194},{"duration":399.60000000009313,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":194.0999999998603,"connectEnd":194.0999999998603,"connectStart":194.0999999998603,"domainLookupEnd":194.0999999998603,"domainLookupStart":194.0999999998603,"fetchStart":194.0999999998603,"redirectEnd":0,"redirectStart":0,"requestStart":194.0999999998603,"responseEnd":593.6999999999534,"responseStart":593.6999999999534,"secureConnectionStart":194.0999999998603},{"duration":670.8000000000466,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":194.5,"connectEnd":194.5,"connectStart":194.5,"domainLookupEnd":194.5,"domainLookupStart":194.5,"fetchStart":194.5,"redirectEnd":0,"redirectStart":0,"requestStart":194.5,"responseEnd":865.3000000000466,"responseStart":865.3000000000466,"secureConnectionStart":194.5}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":44,"responseStart":186,"responseEnd":187,"domLoading":190,"domInteractive":1296,"domContentLoadedEventStart":1296,"domContentLoadedEventEnd":1343,"domComplete":2012,"loadEventStart":2012,"loadEventEnd":2015,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"ad1b9b810763cd","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":113,"dbReadsTimeInMs":11,"dbConnsTimeInMs":13,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}
